Principal Engineer, Product Security

Company Overview

Analog Devices, Inc. is a leading global semiconductor company focused on bridging physical and digital realms to facilitate innovation at the Intelligent Edge. With a strong presence in analog, digital, AI, and software technologies, the company addresses challenges such as climate change, connectivity, automation, robotics, mobility, healthcare, energy, and data centers. In FY25, Analog Devices achieved over $11 billion in revenue.

Role Summary

The Principal Engineer for Product Security will oversee the security aspects throughout the entire product lifecycle—from initial definition to release and ongoing post-launch support. Operating within the core security enablement team, this person will lead program-level product security efforts, coordinate security assurance, collaborate with various security stakeholders, and handle post-release incident responses. The role involves aligning security strategies with customer requirements, standards compliance, and long-term support needs in partnership with the program owner.

Responsibilities

• Lead the product security activities within the program, acting as the key accountable figure for security across digital and mixed signal chips, modules, subsystems, and software.
• Establish and maintain the product security stance, defining requirements, objectives, and underlying assumptions.
• Ensure generation of documentation and evidence demonstrating adherence to security assurance processes.
• Serve as the main liaison with the Product Security Assurance team and designated Security Advisor for consulting on security questions during development phases.
• Influence security requirements, architectural choices, threat analyses, and selection of security intellectual property.
• Collaborate closely with product owners, architects, software teams, and other engineering stakeholders to ensure security integrates well with product scope, architecture, cost, schedule, and usage.
• Engage with key customers to confirm security objectives, assumptions about threats, and expected security postures for applications.
• Coordinate compliance planning and execute adherence to relevant standards, regulations, certifications, and Secure Development Lifecycle outputs.
• Supervise implementation of security measures, secure development practices, verification efforts, provisioning-related activities, and continuity of product security following release.
• Lead post-release security incident response for the product, organizing mitigation and response activities if vulnerabilities or incidents appear.
• Maintain product security over the product's lifespan, including remediation support, maintenance responsibilities, and end-of-life security efforts.

Minimum Qualifications

• Completion of formal security training or possession of professional security certification.
• Approximately 10 years of experience applying secure development processes, product security implementations, and assurance procedures aligned with recognized standards.
• Knowledge of industry standards and regulatory frameworks relevant to product security, such as IEC62443, ISO21434, US FDA, and EU CRA.
• Strong grasp of product-level security requirements covering hardware System-on-Chip architectures, Secure Boot, hardware cryptography, and embedded software security; preferably with at least 3 years of silicon SoC security design experience.
• Technical proficiency spanning software, hardware, network, and cloud security disciplines related to embedded or connected products.
• Effective collaboration skills to work with product, architecture, software, hardware, quality, and assurance teams.

Additional Skills and Abilities

• Clear communication skills to articulate security decisions and foster trust among internal teams and customers.
• Capability to translate market demands, customer needs, and regulatory requirements into actionable product security goals and implementation plans.
• Competency in managing long-term security responsibilities including compliance documentation, certifications, and maintenance post-launch.
• Experience navigating cross-functional product environments where security interacts with architecture, implementation, verification, manufacturing, and ongoing operational support.

Additional Information

Applicants requiring access to technical data may need to undergo export licensing approvals from U.S. government bodies depending on citizenship or residency status.

Analog Devices is committed to equal employment opportunity, promoting a workplace free from discrimination on numerous legally protected grounds.

Other Details

• Travel requirement: Approximately 10% of the time.
• Shift: First shift/daytime hours.